cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
6266
Views
0
Helpful
8
Replies

IPv6 DNS lookup instead of IPv4

OrkhanRustamli
Level 1
Level 1

Hey All,

I have 9500 series Switches which is facing the firewall and plays the DNS Proxy role for clients and everything is perfect. What is the problem I want to renew license with CSSM and therefore it needs to contact tools.cisco.com. I have tested and the switch has ip connectivity to internet, ping works. But the problem is when I try to telnet tools.cisco.com 443 I see that it tries to contact IPv6 address. I tested several other domain names and all are the same with IPv6. I have disabled IPv6 unicast-routing globally, but it does not help.

 

telnet tools.cisco.com 443
Trying 2001:420:1201:5::A, 443 ...
% Destination unreachable; gateway or host down

 

Any help is appreciated.

 

 

8 Replies 8

MatsR
Level 1
Level 1

Hi,

 

Did you solve this?

I have this excact same issue on a C1100 router

 

 

BR

Mats

 

Hi,

 

    First try configuring this: "call-home/http resolve-hostname ipv4-first", clear your DNS cache and see if it works now; if still not, try rebooting; if still not, hardcode the IPv4 address in the call-home URL (instead of the name), get the job done and raise a TAC case.

 

Regards,

Cristian Matei.

M@rco
Level 1
Level 1

set "no ipv6 enable" on the DNS-facing interface

That doesn't work!

Did anybody work out the answer to this?

Looks like there's an answer here: https://community.cisco.com/t5/switching/disable-aaaa-dns-lookups-on-non-ipv6-router/td-p/3413517

- Disable ipv6 on all interfaces.

Hello,

 

not sure if you already posted this in another thread ? I cannot reach the site at all...I wonder if the site is up...

Seems to work for me:

TEST#ping tools.cisco.com
Type escape sequence to abort.
Sending 5, 100-byte ICMP Echos to 72.163.4.38, timeout is 2 seconds:
!!!!!
Success rate is 100 percent (5/5), round-trip min/avg/max = 112/113/116 ms

Hello,

 

ping works, but nothing else. I cannot reach the site on any port...

Works for me - maybe a local ACL/firewall problem.

TEST#telnet tools.cisco.com 443 /ipv4
Trying tools.cisco.com (173.37.145.8, 443)... Open

Review Cisco Networking products for a $25 gift card